Security Architect

Description:

Security Architect
2-3 days Bristol then rest remote
6 months likely extension
£600pd outside IR35
Active DV or SC clearance required

Key Responsibilities

Architecture & Design

Develop secure architecture designs for container platforms (e.g., Kubernetes, OpenShift, Docker).
Architect and strengthen security controls across virtualisation technologies, including VMware, Hyper?V, and cloud-native virtualisation frameworks.
Produce high-quality HLDs/LLDs, security patterns, and architectural governance artefacts.
Ensure designs align with NCSC guidance, industry best practices (e.g., CIS Benchmarks), and organisational policy.Security Assurance

Conduct security assessments and threat modelling against containerised and virtualised workloads.
Validate platform configurations against security baselines, compliance frameworks, and risk appetite.
Provide expert guidance during project delivery to ensure security by design principles are followed.
Support accreditation activities and ensure all architectural documentation meets government standards.DevSecOps & Platform Security

Embed security controls within CI/CD pipelines.
Advise on secure container image lifecycle management (build, scan, deploy, retire).
Evaluate and implement tools for:
Container security scanning (e.g., Trivy, Aqua, Twistlock)
Runtime protection and workload isolation
Secrets and identity management (Vault, KMS, etc.)
Define security controls for ingress/egress, service mesh, and inter?container communications.Stakeholder Engagement

Work closely with engineering, infrastructure, and security operations teams.
Act as SME for containerisation and virtualisation security.
Communicate complex technical concepts to both technical and non?technical stakeholders.
Influence and guide senior leadership on architectural decisions and risk.Essential Skills & Experience

Active SC Clearance (minimum).
Proven track record as a Security Architect in large-scale or secure environments.
Deep technical knowledge of:
Kubernetes, Docker, and container orchestration platforms.
Virtualisation platforms such as VMware vSphere/ESXi, Hyper?V, or KVM.
Cloud platforms (AWS, Azure, GCP) and container services (AKS/EKS/GKE).
Strong understanding of:
Network and infrastructure security
Zero Trust principles
Identity and Access Management (IAM)
Secrets management
Workload isolation and micro?segmentation
Knowledge of security standards and frameworks:
NIST, ISO 27001, CIS Benchmarks
NCSC Cloud Security Principles
Government Security Classifications PolicyDesirable Skills

Experience with OpenShift or enterprise Kubernetes distributions.
Hands?on security tooling (Falco, Istio, Calico, etc.).
Experience with SAST/DAST, SBOMs, and software supply chain security.
Familiarity with automation tooling (Terraform, Ansible, Helm).
Certifications such as:
CCSK / CCSP
CISSP
CISM
Kubernetes Security Specialist (CKS)
VMware security-related certificationsIf you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website